
The newer rootĬertificate (ISRG Root X1) is now widely trusted too - but some older devices Off the ground and be trusted by almost every device immediately. When we got started, that older root certificate (DST Root CA X3) helped us get “cross-signature” from an older root certificate: DST Root CA X3. To make sure theĬertificates we issue are trusted on older devices, we also have a They include ISRG Root X1 in their list of root certificates. Modern browsers andĭevices trust the Let’s Encrypt certificate installed on your website because Let’s Encrypt has a “ root certificate” called ISRG Root X1. Might have to pay a little more attention to the change. If you provide an API or have to support IoT devices, you If you run a typical website, you won’t noticeĪ difference - the vast majority of your visitors will still accept your Let’sĮncrypt certificate. On September 30 2021, there will be a small change in how older browsers and devices We have also updated our Production Chain Changes thread on our community forum - our team and community are here and ready to help with any questions you may have about this expiration. For more details about the plan, keep reading! As planned, the DST Root CA X3 cross-sign has expired, and we’re now using our own ISRG Root X1 for trust on almost all devices.
